PRIVACY POLICY

Avinissery SCB Mobile Banking

Effective Date: 17 August 2026

1. About This Privacy Policy

Avinissery Service Co-operative Bank Ltd. No. 400 (“Avinissery SCB”, “the Bank”, “we”, “us” or “our”) respects the privacy of its customers and is committed to protecting the personal and financial information entrusted to us.

This Privacy Policy explains how Avinissery SCB Mobile Banking (“the App”) accesses, collects, uses, stores, protects and shares information when customers use the App.

By using the App, you acknowledge that you have read and understood this Privacy Policy.

2. Bank Information

Avinissery Service Co-operative Bank Ltd. No. 400
Head Office
Anakkallu Junction
Avinissery P.O.
Thrissur District, Kerala – 680306, India

Phone: +91 487 2459403
Mobile: +91 8301059403
Email: avinisseryscb400@gmail.com
Website: https://avinisseryscb.com/

3. Information We May Process

Depending on the services used and the configuration of the App, the App may process:

A. Customer and account information
• Customer ID / user ID
• Customer name
• Bank account details
• Account balances
• Account statements and transaction information
• Account type and related banking information
• Customer profile information maintained by the Bank

B. Authentication and security information
• Login credentials
• Authentication information
• One-time passwords (OTP), where applicable
• Security tokens/session information
• Information required to detect unauthorized access or fraudulent activity

C. Beneficiary and transaction information
• Beneficiary name
• Beneficiary account number
• IFSC code
• Bank and branch information
• Transaction amount
• Transaction remarks
• Transaction date and status

D. Device and technical information
The App may process technical information necessary for security, troubleshooting and reliable operation, such as device type/model, Android version, App version, IP address, network-related information, device identifiers where technically required, and application logs/diagnostic information.

The Bank’s IT team should verify the exact device identifiers, diagnostics, analytics SDKs and permissions used by the production App before publication of this policy.

4. How We Use Information

Information processed through the App may be used to:
• Authenticate customers securely.
• Provide mobile banking services.
• Display account information and balances.
• Provide account statements and transaction history.
• Process fund transfers.
• Manage beneficiaries.
• Maintain and improve security.
• Detect, investigate and prevent fraudulent or unauthorized transactions.
• Troubleshoot technical problems.
• Maintain application reliability and performance.
• Comply with applicable laws, regulations and regulatory requirements.
• Respond to customer requests and support queries.
• Maintain appropriate banking and audit records.

5. Financial and Sensitive Information

Avinissery SCB Mobile Banking may process financial and authentication information because these are essential to providing mobile banking services. This may include account information, transaction information, beneficiary information and authentication credentials.

Such information is handled with appropriate security measures and is not used for unrelated advertising or marketing purposes.

The Bank does not sell customers’ personal or sensitive information.

6. Sharing of Information

Avinissery SCB does not sell or rent customers’ personal information.

Information may be shared or processed where necessary for legitimate purposes, including:

• Authorized banking and technology service providers that operate, maintain, secure or support the mobile banking service.
• Authorized banking, payment, clearing or financial infrastructure providers where necessary to process customer-initiated transactions.
• Government, regulatory, law-enforcement or judicial authorities where required or permitted by applicable law.
• Security and fraud-prevention service providers where reasonably necessary to investigate fraud, unauthorized activity or security incidents.

Service providers are expected to handle information in accordance with applicable contractual, security and legal requirements.

7. Data Security

The Bank takes reasonable technical and organizational measures to protect customer information against unauthorized access, unauthorized disclosure, alteration, loss, misuse and destruction.

The App and associated banking services use appropriate security mechanisms for protecting information during transmission and processing.

Customers should keep their login credentials confidential, never share passwords or OTPs, avoid using the App on compromised or unauthorized devices, and immediately notify the Bank of suspected unauthorized access or transactions.

The IT team should confirm the exact encryption/security technologies used by the production API and App before publication.

8. Data Retention

The Bank retains customer and transaction information for as long as reasonably necessary to provide banking services, maintain banking and transaction records, meet legal and regulatory requirements, meet accounting/audit/security requirements, resolve disputes and complaints, and prevent fraud and unauthorized activity.

Different categories of information may be retained for different periods depending on their purpose and applicable legal or regulatory requirements.

When information is no longer required to be retained, it will be deleted, anonymized or securely disposed of in accordance with applicable requirements and the Bank’s retention procedures.

9. Account and Data Deletion

Customers may contact Avinissery Service Co-operative Bank Ltd. No. 400 to request information regarding closure of mobile banking access and applicable deletion of personal information.

Requests are subject to applicable banking, legal, regulatory, accounting, audit and transaction-retention requirements.

Where information is required to be retained by law or regulation, the Bank may retain that information for the required period even after mobile banking access is discontinued.

The Bank should confirm the actual operational process for handling account/data deletion requests before publishing this policy.

10. Cookies and Tracking Technologies

The mobile application does not use cookies in the same manner as a traditional website.

However, the App or its supporting services may use technical identifiers, session information, logs or similar technologies that are necessary for authentication, security, functionality and service operation.

The IT team should verify whether Firebase Analytics, Crashlytics, Google services, advertising SDKs or other third-party analytics/monitoring SDKs are included in the production App.

11. Third-Party Services

The App may depend on authorized third-party infrastructure, software libraries, APIs or service providers for secure communication, authentication, push notifications, application security, transaction processing, monitoring and technical support.

Where third-party services process information on behalf of the Bank, they are expected to handle information in accordance with applicable contractual, security and legal requirements.

The IT team should insert or confirm the actual third-party SDK/service names after reviewing the production AAB and backend architecture.

12. Children’s Privacy

Avinissery SCB Mobile Banking is intended for the Bank’s customers and is not specifically directed toward children.

The App should not be used by persons who are not eligible customers of the Bank. The Bank does not knowingly collect personal information from children through the App for purposes unrelated to legitimate banking services.

13. Customer Responsibilities

Customers are responsible for keeping their authentication information confidential.

Customers should never disclose passwords, OTPs, PINs or authentication codes to another person, including persons claiming to represent the Bank.

If a customer suspects unauthorized access or a fraudulent transaction, the Bank should be contacted immediately using the official contact channels.

14. Changes to This Privacy Policy

The Bank may update this Privacy Policy from time to time to reflect changes in banking services, mobile application functionality, technology, security practices, or applicable laws and regulations.

The updated Privacy Policy will be published on the Bank’s official website. The Effective Date displayed at the beginning of this Privacy Policy will indicate when the policy was last updated.

15. Contact Us

Avinissery Service Co-operative Bank Ltd. No. 400
Head Office
Anakkallu Junction
Avinissery P.O.
Thrissur District, Kerala – 680306, India

Phone: +91 487 2459403
Mobile: +91 8301059403
Email: avinisseryscb400@gmail.com
Website: https://avinisseryscb.com/

16. Consent

By using Avinissery SCB Mobile Banking, you acknowledge that you have read and understood this Privacy Policy and that your information may be processed as described above for providing banking services, maintaining security, preventing fraud and complying with applicable legal and regulatory requirements.

Last Updated: 17 August 2026